Privacy Policy

Great Falls Handyman (also operating as The GF Handyman, "we", "us"), owned by Daniel Emrich, operates our field-service application and the services offered through it. This policy explains what personal information we collect, how we use and protect it, and the choices you have.

Information we collect

• Contact & service information you provide: name, email, phone, address, and details about the job or service requested.
• Payment information: processed by our payment providers, Stripe and Square. We do not store card numbers or security codes — those are handled and tokenized directly by the provider.
• Bank account information: if you connect a bank account through Plaid, or provide ACH details, we receive account and routing numbers, which we encrypt at rest. We never receive your online-banking username or password — those go only to Plaid.
• Documents & media: receipts, work-order photos, and e-signatures.
• Technical data: request logs and app/device version, used for security and support.

How we use your information

To provide, schedule, and perform services; prepare estimates and invoices; process payments and bank transactions; communicate with you; and meet our legal, accounting, and tax obligations.

Plaid

We use Plaid Inc. to connect your bank account. When you connect an account you also agree to Plaid's End User Privacy Policy at plaid.com/legal. Plaid handles your bank credentials directly; we receive only the account details needed to move or reconcile funds, and we encrypt them at rest.

Service providers we share data with

• Payments: Stripe, Square. Bank connectivity: Plaid, Increase.
• Email & communications: Google, Microsoft, and our mail server.
• Tax filing: TaxBandits; Montana Department of Revenue.
• AI assistance for drafting text and estimates: xAI (Grok) and Anthropic.
• Hosting and infrastructure providers.

We do not sell your personal information.

How we protect your information

All traffic is encrypted in transit with TLS 1.2 or higher. Sensitive data — bank account and routing numbers, tax identification numbers, and integration credentials — is encrypted at rest. Access is restricted and activity is logged.

Data retention & deletion

We keep personal information only as long as needed to provide our services and to satisfy legal, accounting, and tax retention requirements (generally up to seven years for financial records), after which it is deleted or de-identified. Our internal Data Retention & Deletion Policy is reviewed at least annually.

Your rights

You may request access to, correction of, or deletion of your personal information. Financial records we are legally required to retain will be de-identified rather than deleted. To make a request, email [email protected]. We respond within the timeframe required by applicable law.

Consent

By using our services, submitting a form, connecting a bank, or making a payment, you consent to the collection and use of your information as described here. You may withdraw consent by contacting us, though this may limit our ability to provide services.

Children

Our services are not directed to children under 13, and we do not knowingly collect their data.

Changes to this policy

We may update this policy; the effective date above reflects the latest version. Questions or requests: [email protected].